Extracted

• • Target

    702331dbfe2a2c8e3fcdce4f255fd70e515c645e681011afb02c1a93362051f2

  • Size

    262KB

  • MD5

    19b3695cbf046c2f027c3b13c17ac383

  • SHA1

    1be6d3d9296f704783335ffa5225854bef7395e2

  • SHA256

    702331dbfe2a2c8e3fcdce4f255fd70e515c645e681011afb02c1a93362051f2

  • SHA512

    c238d591a3d4fb6b46e414eafd7ce4305ef604422437e44c4ca12a22b1b397a3b25821560ad52070505d89f2c89f3f6e15e3d25718e99ff31eb1e4f02381954d

  • SSDEEP

    3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc

  Score

  10^/10

  redlinesheroninfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1